Bastien Roucariès pushed to branch master at Debian Java Maintainers / netty
Commits: 0c4fc7e4 by Bastien Roucariès at 2026-04-06T17:15:53+02:00 Fix a typo - - - - - 1 changed file: - debian/patches/CVE-2026-33870.patch Changes: ===================================== debian/patches/CVE-2026-33870.patch ===================================== @@ -54,9 +54,9 @@ origin: backport, https://github.com/netty/netty/commit/60e53c99f2e80aef1025e903 --- .../http/HttpChunkLineValidatingByteProcessor.java | 170 +++++++++++++++++++ .../handler/codec/http/HttpObjectDecoder.java | 73 ++++++-- - .../java/io/netty/handler/codec/http/HttpUtil.java | 11 ++ + .../java/io/netty/handler/codec/http/HttpUtil.java | 13 ++ .../handler/codec/http/HttpRequestDecoderTest.java | 183 ++++++++++++++++++++- - 4 files changed, 426 insertions(+), 11 deletions(-) + 4 files changed, 428 insertions(+), 11 deletions(-) create mode 100644 codec-http/src/main/java/io/netty/handler/codec/http/HttpChunkLineValidatingByteProcessor.java diff --git a/codec-http/src/main/java/io/netty/handler/codec/http/HttpChunkLineValidatingByteProcessor.java b/codec-http/src/main/java/io/netty/handler/codec/http/HttpChunkLineValidatingByteProcessor.java @@ -341,13 +341,13 @@ index 60d4526..e3d8df7 100644 + } } diff --git a/codec-http/src/main/java/io/netty/handler/codec/http/HttpUtil.java b/codec-http/src/main/java/io/netty/handler/codec/http/HttpUtil.java -index 512d841..a30a738 100644 +index 512d841..f1b37d6 100644 --- a/codec-http/src/main/java/io/netty/handler/codec/http/HttpUtil.java +++ b/codec-http/src/main/java/io/netty/handler/codec/http/HttpUtil.java -@@ -665,6 +665,17 @@ public final class HttpUtil { - // Reject the message as invalid - throw new IllegalArgumentException( +@@ -667,4 +667,17 @@ public final class HttpUtil { "Content-Length value is not a number: " + firstField, e); + } + } + + private static final long TOKEN_CHARS_HIGH = 0x57ffffffc7fffffeL; + private static final long TOKEN_CHARS_LOW = 0x3ff6cfa00000000L; @@ -358,9 +358,9 @@ index 512d841..a30a738 100644 + } + if (octet < 64) { + return 0 != (TOKEN_CHARS_LOW & 1L << octet); - } ++ } + return 0 != (TOKEN_CHARS_HIGH & 1L << octet - 64); - } ++ } } diff --git a/codec-http/src/test/java/io/netty/handler/codec/http/HttpRequestDecoderTest.java b/codec-http/src/test/java/io/netty/handler/codec/http/HttpRequestDecoderTest.java index e90c6af..7385885 100644 View it on GitLab: https://salsa.debian.org/java-team/netty/-/commit/0c4fc7e4b9c921ecb9dde2a75b7c8a16efbe3dde -- View it on GitLab: https://salsa.debian.org/java-team/netty/-/commit/0c4fc7e4b9c921ecb9dde2a75b7c8a16efbe3dde You're receiving this email because of your account on salsa.debian.org.
_______________________________________________ pkg-java-commits mailing list [email protected] https://alioth-lists.debian.net/cgi-bin/mailman/listinfo/pkg-java-commits
